CVE-2013-2765
NoneCVSS
—
EPSS
13.7%
Published
Jul 15, 2013
CISA due date
—
The record
The ModSecurity module before 2.7.4 for the Apache HTTP Server allows remote attackers to cause a denial of service (NULL pointer dereference, process crash, and disk consumption) via a POST request with a large body and a crafted Content-Type header.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Debian:11 | modsecurity-apache | 0 | 2.6.6-9 |
| Debian:12 | modsecurity-apache | 0 | 2.6.6-9 |
| Debian:13 | modsecurity-apache | 0 | 2.6.6-9 |
| Mageia:2 | apache-mod_security | 0 | 2.6.3-3.5.mga2 |
| Mageia:3 | apache-mod_security | 0 | 2.7.4-1.mga3 |
| Ubuntu:14.04:LTS | modsecurity-apache | 0 | 2.7.7-2 |
| openSUSE:Tumbleweed | apache2-mod_security2 | 0 | 2.9.0-5.6 |
Related vulnerabilities
- CVE-2012-4528 The mod_security2 module before 2.7.0 for the Apache HTTP Server allows remote attackers… Also affects modsecurity-apache
- CVE-2026-112405 Pillow is a Python imaging library. CWE-476
- CVE-2026-112392 Pillow is a Python imaging library. CWE-476
- CVE-2026-100348 kin-openapi is a Go project for handling OpenAPI files. CWE-476
- CVE-2026-100349 kin-openapi is a Go project for handling OpenAPI files. CWE-476
- CVE-2026-109280 ImageMagick 7.1.0-20 before 7.1.2-32 contains a use after free vulnerability in the -fx… CWE-476
- CVE-2026-109272 ImageMagick 7.1.1-31 before 7.1.2-32 contains a NULL pointer dereference in the… CWE-476
- CVE-2026-109258 ImageMagick 7.1.0-20 before 7.1.2-32 contains an invalid memory free vulnerability in the… CWE-476